$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/22994b5f-f484-35e7-90cb-9f9933c3bd29.roa File: 22994b5f-f484-35e7-90cb-9f9933c3bd29.roa (raw, json) Hash identifier: aOgppouCVjZc4oYcwq8vEIKZgKQFrDKMxUNH+iyOBoE= Subject key identifier: 3C:02:3A:26:24:2E:1F:85:5A:FF:B5:FD:77:E4:F1:11:26:93:7A:3F Certificate issuer: /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e Certificate serial: 010D0C9F4328584B16A170C75A2925654E9E3580 Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/22994b5f-f484-35e7-90cb-9f9933c3bd29.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 8075 IP address blocks: 64.40.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:70:c7:5a:29:25:65:4e:9e:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=c79034d5-69de-4afe-bb64-623e9142edc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:51:4c:83:09:92:e6:75:25:30:52:54:0f: c9:38:f7:d1:a5:df:61:09:01:34:60:8c:23:ca:c5: 27:d7:84:88:36:70:26:b5:f6:66:48:9e:ee:bd:3e: 8f:ab:35:d7:ec:c3:2a:5a:75:31:90:a7:9c:1f:7f: c5:20:8f:bc:4a:90:95:1c:57:63:34:77:c8:4f:e0: f8:04:2c:c1:34:67:fd:e5:1c:55:ed:12:24:f3:1d: 40:9d:57:82:79:29:54:e4:c6:e9:e0:e2:de:ee:3f: 43:07:a5:32:e8:68:27:78:7d:d3:9c:48:de:6b:be: 12:76:ee:d8:e6:c6:45:be:49:18:2c:9d:03:a9:97: 96:03:bb:f2:04:b3:34:9c:25:4a:7d:bf:66:a4:ce: 1b:91:84:fa:a8:d1:bb:57:62:13:36:db:3b:25:26: 72:ae:40:e7:ca:6f:28:d3:f5:dc:27:b3:df:75:cd: 75:10:e2:fe:a7:24:b6:6d:64:f9:73:d7:a7:b0:e2: 0f:f7:84:bb:5c:b3:97:01:7b:a6:74:24:00:f2:86: 0e:fd:4c:98:97:e9:57:3f:82:5e:b8:27:45:8d:71: 23:35:f8:1f:a6:81:01:60:c4:4f:e3:a5:b4:58:60: a5:2c:76:c1:0d:eb:71:16:67:f2:66:22:58:38:7c: 91:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:02:3A:26:24:2E:1F:85:5A:FF:B5:FD:77:E4:F1:11:26:93:7A:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/22994b5f-f484-35e7-90cb-9f9933c3bd29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl X509v3 Authority Key Identifier: keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer sbgp-ipAddrBlock: critical IPv4: 64.40.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f0:18:b1:04:cf:cc:8e:9d:75:a2:70:dd:3e:f0:49:e8:46: d4:d2:a4:6c:62:6d:b6:29:d3:c8:8f:fb:78:a3:2d:34:0c:a8: f0:73:6a:de:61:43:5c:2e:7d:60:9a:ba:58:78:1c:76:c9:16: 8d:36:5e:f7:0e:4b:8e:c3:e1:e4:58:7c:63:52:c1:5b:89:ef: b6:15:15:de:87:61:68:3f:15:50:16:9b:db:03:2b:fb:ea:71: 91:99:59:1a:bb:2c:cb:9f:4c:66:dc:db:5b:88:03:43:84:50: 2f:07:21:80:dc:52:47:9a:2f:eb:cb:02:4c:a8:23:41:6d:1d: 77:31:9d:d1:66:77:87:ac:20:63:31:b4:35:cf:d4:9d:16:9e: 58:59:14:98:31:f1:e7:53:4e:52:3a:d7:24:9a:13:f6:af:1a: 2b:ea:4c:27:3a:b9:15:8a:79:c1:14:77:43:ab:3f:79:a8:ce: 37:02:c6:39:8d:40:7c:7f:9a:84:e1:9c:23:81:62:6a:19:ff: 70:9e:4e:6d:b0:4a:06:ed:9e:e8:84:1a:40:8d:95:6e:19:b7: ad:40:1e:9d:23:91:9c:3b:63:c7:d9:d9:aa:08:49:4e:70:5c: 08:c7:36:65:c7:80:f3:63:b9:9b:1d:60:63:9d:a9:dd:64:79: e7:5c:06:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoXDHWiklZU6eNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyMmQ3YWUtMTIyNC00M2ZiLTkwN2EtNjY5MGY3YmQ5 YTJlMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk Yzc5MDM0ZDUtNjlkZS00YWZlLWJiNjQtNjIzZTkxNDJlZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVVRTIMJkuZ1JTBSVA/JOPfRpd9hCQE0YIwj ysUn14SINnAmtfZmSJ7uvT6PqzXX7MMqWnUxkKecH3/FII+8SpCVHFdjNHfIT+D4 BCzBNGf95RxV7RIk8x1AnVeCeSlU5Mbp4OLe7j9DB6Uy6GgneH3TnEjea74Sdu7Y 5sZFvkkYLJ0DqZeWA7vyBLM0nCVKfb9mpM4bkYT6qNG7V2ITNts7JSZyrkDnym8o 0/XcJ7Pfdc11EOL+pyS2bWT5c9ensOIP94S7XLOXAXumdCQA8oYO/UyYl+lXP4Je uCdFjXEjNfgfpoEBYMRP46W0WGClLHbBDetxFmfyZiJYOHyRwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwCOiYkLh+FWv+1/Xfk8REmk3o/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZTIy ZDdhZS0xMjI0LTQzZmItOTA3YS02NjkwZjdiZDlhMmUvMjI5OTRiNWYtZjQ4NC0z NWU3LTkwY2ItOWY5OTMzYzNiZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWUyMmQ3YWUtMTIyNC00M2ZiLTkw N2EtNjY5MGY3YmQ5YTJlLzVlMjJkN2FlLTEyMjQtNDNmYi05MDdhLTY2OTBmN2Jk OWEyZS5jcmwwHwYDVR0jBBgwFoAUYLFmHyIaYxU6c0EQcq4OzNe6NGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81ZTIyZDdhZS0xMjI0LTQzZmItOTA3YS02Njkw ZjdiZDlhMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCiHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPwGLEEz8yOnXWicN0+8EnoRtTSpGxibbYp08iP+3ijLTQMqPBzat5h Q1wufWCaulh4HHbJFo02XvcOS47D4eRYfGNSwVuJ77YVFd6HYWg/FVAWm9sDK/vq cZGZWRq7LMufTGbc21uIA0OEUC8HIYDcUkeaL+vLAkyoI0FtHXcxndFmd4esIGMx tDXP1J0WnlhZFJgx8edTTlI61ySaE/avGivqTCc6uRWKecEUd0OrP3mozjcCxjmN QHx/moThnCOBYmoZ/3CeTm2wSgbtnuiEGkCNlW4Zt61AHp0jkZw7Y8fZ2aoISU5w XAjHNmXHgPNjuZsdYGOdqd1keedcBvo= -----END CERTIFICATE-----Generated at Fri Oct 10 22:35:41 2025 by rpki-client